Oracle Oracle Forms 10g
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:forms:10g:*:*:*:*:*:*:*
part: a version: 10g update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Forms (0cfed3b8-20c7-5f56-98e2-c02c7cd22f61) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-3207 |
vulnerable | 2026-06-08 04:48:39.932096 |
Details available
The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.
Published: 2005-10-14T04:00:00.000Z
Updated: 2024-08-07T23:01:59.298Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2372 |
vulnerable | 2026-06-08 04:48:29.155163 |
Details available
Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and referencing it using an absolute pathname argument in the (1) form or (2) module parameters to f90servlet.
Published: 2005-07-26T04:00:00.000Z
Updated: 2024-08-07T22:22:49.050Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1178 |
vulnerable | 2026-06-08 04:48:25.796042 |
Details available
SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature.
Published: 2005-04-19T04:00:00.000Z
Updated: 2024-08-07T21:44:05.097Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.